Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6KViasT8sU1yS1F_SUcGGitdric.roa
File:                     6KViasT8sU1yS1F_SUcGGitdric.roa (raw, json)
Hash identifier:          szjS+J6qioyYyQd4/RQAWm7ep/x+d+pE63Z1zLMac3U=
Subject key identifier:   E8:A5:62:6A:C4:FC:B1:4D:72:4B:51:7F:49:47:06:1A:2B:5D:AE:27
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CC9BCC6DB1F376E082DD1E99EFB07056A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6KViasT8sU1yS1F_SUcGGitdric.roa
Signing time:             Tue 02 Jan 2024 10:34:01 +0000
ROA not before:           Tue 02 Jan 2024 10:34:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34927
IP address blocks:        2a10:ccc3:ccca::/47 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:c6:db:1f:37:6e:08:2d:d1:e9:9e:fb:07:05:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 10:34:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e8a5626ac4fcb14d724b517f4947061a2b5dae27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:26:71:d0:c6:7b:73:d4:af:bb:93:d5:ee:42:
                    b6:59:48:29:48:90:c4:77:e0:48:e4:05:1c:35:a5:
                    6a:de:10:28:d7:13:b0:97:ef:77:3d:44:8b:37:f5:
                    b7:16:ac:05:4f:17:1a:cb:ec:ad:06:d0:8f:f3:ed:
                    34:38:b1:54:70:29:af:61:df:b8:64:46:78:18:08:
                    ae:96:e2:46:e6:f8:74:ea:4a:55:f3:c2:bf:f0:0b:
                    cc:97:5e:e2:25:c5:10:ec:80:9f:60:71:07:e1:9b:
                    ff:68:e9:d4:f8:79:9b:da:fc:69:3f:e6:ae:c4:54:
                    ef:22:42:bc:46:00:90:37:9c:38:7c:a8:18:44:f7:
                    1d:88:a7:c8:46:36:cd:6e:32:0e:2a:09:aa:cb:47:
                    84:8c:06:8f:e0:2f:49:a7:5c:0d:64:f7:aa:b8:c8:
                    2d:f8:1e:57:f3:7e:da:fc:55:82:cf:d1:b0:e9:33:
                    ac:53:82:ee:67:03:31:1e:61:6a:58:d7:1a:79:33:
                    2c:c8:74:a6:51:08:c5:2c:5b:b2:ac:e0:3d:fd:32:
                    c3:26:ed:48:0a:f3:14:ec:6a:ba:1c:cf:a5:f7:91:
                    01:b7:53:be:bf:52:2a:0b:30:fd:60:85:ef:e6:87:
                    7c:f9:e8:67:f9:f5:1a:c4:38:a3:e1:d7:d4:b7:d6:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A5:62:6A:C4:FC:B1:4D:72:4B:51:7F:49:47:06:1A:2B:5D:AE:27
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6KViasT8sU1yS1F_SUcGGitdric.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:ccc3:ccca::/47

    Signature Algorithm: sha256WithRSAEncryption
         c3:ba:69:76:27:9c:ef:0f:9f:6e:f7:f9:18:ab:7f:7d:1b:83:
         d8:88:6c:81:61:22:bd:55:d5:82:30:f5:61:9b:de:ab:8a:97:
         d6:ff:d3:2a:72:ff:3b:d6:31:1b:1f:45:42:cb:6c:1f:aa:5f:
         c3:4f:65:ef:ff:50:7d:1c:ca:37:5d:b4:88:d0:5a:b4:84:b2:
         f0:21:2e:df:c4:f8:e3:2b:ca:4b:37:80:95:eb:b9:8e:c6:23:
         3f:e7:6d:c3:61:0e:4f:9c:f8:0a:df:90:33:a0:b2:45:aa:a8:
         a1:1b:1d:e7:8d:e6:2e:d5:8a:ae:30:08:ec:20:ac:95:42:8c:
         03:8b:e4:00:ae:3b:0a:d7:dc:ec:14:c7:e8:66:4d:1f:f5:f9:
         cd:ff:52:4a:f9:9f:95:83:80:fb:5d:ea:c5:26:58:32:06:33:
         cf:14:ca:d8:4a:aa:fd:fe:86:ea:ad:fe:eb:cb:06:4c:de:2a:
         d1:e3:52:2b:dc:3c:cd:cf:79:15:35:af:65:f6:17:99:0d:50:
         1e:71:e0:11:7c:c6:36:a1:97:3c:47:03:32:49:37:d4:67:96:
         d3:22:a6:09:72:c2:8a:d5:71:a4:43:dd:09:5b:8c:87:03:0e:
         9e:75:53:55:80:39:94:63:f8:46:8d:d7:70:09:92:e7:a2:c5:
         68:a2:3c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----